Events of this type are either sent to an object that implements
HttpSessionBindingListener when it is bound or
unbound from a session, or to a HttpSessionAttributeListener
that has been configured in the deployment descriptor when any attribute is
bound, unbound or replaced in a session.